Legal
Privacy notice
How personal and health information is intended to be handled when you enquire or book with Miltassia.
Who is responsible for your information
Miltassia is a trading name used by the practitioner and acts as the data controller for personal information collected through this website and during treatment. All general correspondence should be sent by email to admin@miltassiahealththerapy.co.uk. Requests relating to access to personal information or other Subject Access Requests should be sent to sar@miltassiahealththerapy.co.uk
Information collected
The booking process may collect your name, email address, telephone number, home-visit address, selected treatment, appointment details, access notes, payment status and communications about the appointment. Couple bookings also collect the second attendee’s contact and declaration details.
To assess whether treatment can be provided safely, the signed health declaration may contain health conditions, medication, allergies, pregnancy information, recent surgery or injury and other information you choose to disclose. This information is treated as confidential and should be accessed only by the practitioner and authorised support personnel with a genuine need.
How information is used
Information is intended to be used to answer enquiries, arrange and deliver appointments, assess treatment suitability, maintain appropriate treatment records, take payment, send confirmations, manage cancellations and meet professional, insurance, accounting or legal obligations.
Payments and service providers
Card details are entered directly into Stripe’s hosted checkout and are not stored in the Miltassia database. The website stores payment references and status information needed to match the payment to the booking. Hosting, email, payment and support suppliers may process limited information on Miltassia’s behalf under appropriate contractual and security arrangements.
Security and storage
The supplied booking system encrypts health-declaration answers at application level and restricts declaration files to the practitioner administration area. Production use also requires HTTPS, strong administrator credentials, secure server configuration, controlled backups, software updates and access logging.
Retention
We normally keep general enquiries for up to 12 months after the last contact, booking records for six years after the appointment, and financial and payment records for six years after the relevant financial year. Treatment notes and health declarations are normally retained for seven years after the last treatment, while email delivery logs and website security or audit records are kept for up to 24 months. Information may be retained longer where required for tax, insurance, safeguarding, legal claims or other regulatory obligations, after which it will be securely deleted or anonymised. UK companies generally need to retain relevant accounting and tax records for six years.
Your choices and rights
Under UK data-protection law, you may ask to access or receive a copy of the information Miltassia holds about you, correct inaccurate information, restrict or object to its use, request deletion where applicable, transfer eligible information, or withdraw consent at any time. Requests can be made by emailing sar@miltassiahealththerapy.co.uk . We may ask for proof of identity and will normally respond within one calendar month. These rights may be limited where information must be retained for legal, tax, insurance or professional reasons. You may also complain to the Information Commissioner’s Office if you are unhappy with how your information is handled.
Cookies
The core session uses a necessary session cookie for security and booking continuity.